Lucene search
+L

14138 matches found

NVD
NVD
•added 2026/09/25 2:17 p.m.•23 views

CVE-2026-93834

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

8.8CVSS0.00377EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2026/09/25 1:36 p.m.•24 views

CVE-2026-93834

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

8.8CVSS6.4AI score0.00377EPSS
SaveExploits1
Mend
Mend
•added 2026/09/25 1:36 p.m.•8 views

CVE-2026-93834

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

9.3CVSS6.4AI score0.00377EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/09/25 1:36 p.m.•15 views

EUVD-2026-87092

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

8.8CVSS6.4AI score0.00377EPSS
SaveExploits1References3
NVD
NVD
•added 2026/09/25 1:16 a.m.•19 views

CVE-2026-85417

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 12:03 a.m.•16 views

CVE-2026-85417 Incomplete property masking in the SANnav logging subsystem

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 12:03 a.m.•36 views

CVE-2026-85417 Incomplete property masking in the SANnav logging subsystem

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS0.00191EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 12:03 a.m.•15 views

EUVD-2026-86485

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 12:03 a.m.•28 views

CVE-2026-85417

Brocade SANnav versions prior to 3.0.1a are vulnerable to incomplete property masking within the logging subsystem. Under specific configuration conditions, this flaw allows SNMP authentication and privacy passwords to be recorded in plain text within application logs. Attackers with read access ...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Redos
Redos
•added 2026/09/25 12:00 a.m.•13 views

ROS-20260925-73-0068

The vulnerability of the hidpsettimer function in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

8.8CVSS7.6AI score0.00313EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•3 views

PT-2026-98527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RISC-V architecture implementation of the perf subsystem where the available-counter mask is stored as a single unsigned long. Because the iteration process uses...

9.8CVSS5.8AI score0.00511EPSS
SaveExploits0References407
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•5 views

PT-2026-98615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iSCSI target of the SCSI subsystem where a LUN RESET a command used to reset a Logical Unit that aborts a WRITE command in the TRANSPORT WRITE PENDING state can...

9.8CVSS5.8AI score0.00443EPSS
SaveExploits0References410
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•6 views

PT-2026-98528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 crypto subsystem where the hardware may persistently return an -EBUSY error after exhausting retries. This error propagates to the crypto finalize request...

9.8CVSS5.8AI score0.00511EPSS
SaveExploits0References405
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•8 views

PT-2026-98531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 crypto subsystem regarding the handling of the EBUSY return code within PHMAC. When a request is transferred to the crypto engine via the crypto transfer hash...

9.8CVSS5.8AI score0.00511EPSS
SaveExploits0References405
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•5 views

PT-2026-98831

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the bpf refcount field is not marked as unique. This oversight relates to how reference counts are tracked for BPF...

9.8CVSS5.8AI score0.00511EPSS
SaveExploits0References404
Redos
Redos
•added 2026/09/25 12:00 a.m.•12 views

ROS-20260925-73-0011

The vulnerability of the tuningctlset function in the sound subsystem of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

6.5AI score0.0021EPSS
SaveExploits0
Redos
Redos
•added 2026/09/25 12:00 a.m.•13 views

ROS-20260925-73-0147

The vulnerability of the snddg00xstreaminitduplex function in the sound/firewire/digi00x/digi00x-stream.c module of the Linux kernel’s sound subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

6.3AI score0.00214EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•10 views

CVE-2026-93834: Use After Free

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

8.8CVSS6.4AI score0.00377EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•7 views

PT-2026-98318

Name of the Vulnerable Software and Affected Versions SANnav affected versions not specified Description Incomplete property masking in the logging subsystem allows SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Users with rea...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•11 views

CVE-2026-85417: Insertion of Sensitive Information into Log File

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to...

6.4CVSS5.9AI score0.00191EPSS
SaveExploits0References2
Rows per page
Query Builder